US8762720B2 - Method of mutual authentication between a communication interface and a host processor of an NFC chipset - Google Patents
Method of mutual authentication between a communication interface and a host processor of an NFC chipset Download PDFInfo
- Publication number
- US8762720B2 US8762720B2 US11/867,123 US86712307A US8762720B2 US 8762720 B2 US8762720 B2 US 8762720B2 US 86712307 A US86712307 A US 86712307A US 8762720 B2 US8762720 B2 US 8762720B2
- Authority
- US
- United States
- Prior art keywords
- cryptographic data
- host processor
- data
- nfc controller
- nfc
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related, expires
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
- H04L9/3273—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response for mutual authentication
-
- G—PHYSICS
- G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
- G09C—CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
- G09C1/00—Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/80—Wireless
- H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
Definitions
- Embodiments of the present invention relate to an authentication method in a Near Field Communication (NFC) system or chipset comprising an NFC interface circuit sending and receiving contactless data.
- NFC Near Field Communication
- Embodiments of the present invention particularly relate to authenticating a secure processor of the chipset by an NFC component of the chipset.
- NFC component means a controller (microcontroller) connected to an NFC interface circuit.
- NFC technology is currently developed by an industrial consortium grouped under the name Forum NFC (http://www.nfc-forum.org).
- the NFC technology is derived from Radio Frequency Identification (RFID) technology and uses NFC components which may have several operating modes, i.e., a “reader” mode, a “card emulation” mode, and a “device” mode (also referred to as “device-to-device” mode).
- RFID Radio Frequency Identification
- the NFC component operates like a standard RFID reader to read- or write-access an RFID chip (e.g., chip card or contactless tag).
- the NFC component emits a magnetic field, sends data by modulating the amplitude of the magnetic field, and receives data by load modulation and inductive coupling.
- the NFC component operates passively like a transponder to communicate with another reader and to be seen by the other reader as an RFID chip.
- the component does not emit any magnetic field, receives data by demodulating a magnetic field emitted by the other reader, and sends data by modulating the impedance of its antenna circuit (load modulation).
- the component In the “device” mode, the component must match another NFC component located in the same operating mode, and each NFC component alternately goes into a passive state (without field emission) to receive data and into an active state (with field emission) to send data.
- an NFC component may implement several contactless communication protocols and is capable, for example, of exchanging data according to the ISO 14443-A protocol, the ISO 14443-B protocol, the ISO 15693 protocol, or the like.
- Each protocol defines a frequency of emission of the magnetic field, a modulation method for modulating the amplitude of the magnetic field to send data in active mode, and a load modulation method by inductive coupling to send data in passive mode. Therefore, an NFC component is a multimode and multi-protocol device.
- the applicant markets, for example, an NFC component under the name “MicroRead”.
- an NFC component is intended to be integrated into portable devices such as cellular telephones or Personal Digital Assistants (PDAs).
- PDAs Personal Digital Assistants
- an NFC chipset of the type represented in FIG. 1 is produced, i.e., a chipset comprising an NFC component (referenced “NFCR 1 ”) and at least one first host processor HP 1 .
- “Host processor” may be defined as any integrated circuit comprising a microprocessor or a microcontroller and which is connected to a port of the NFC component.
- the NFC chipset also comprises a second host processor HP 2 , and occasionally a third or more.
- the first host processor HP 1 may be the main processor of the device in which the NFC component NFCR 1 is embedded, while the second host processor HP 2 may be a secure circuit.
- the host processor HP 1 is generally a non-secure processor, for example, the baseband circuit (or radiotelephone circuit) of a mobile telephone.
- the host processor HP 2 is, for example, a SIM card (i.e., the microcontroller present in a SIM card). Therefore, the resources of the NFC component are made available to the processors HP 1 , HP 2 to enable them to manage contactless applications. Such applications are shown in FIG. 2 , which represents a mobile telephone 30 equipped with the NFC chipset in FIG. 1 . The following may be distinguished:
- the NFC component NFCR 1 of the mobile telephone 30 is in “reader” mode to read or write to a contactless integrated circuit CLCT.
- the mobile telephone 30 is, in this case, used like an RFID reader.
- This type of application AP 1 can be free of charge and include, for example, reading advertising data inserted into an advertisement at a bus shelter.
- the application AP 1 can also be chargeable and include, for example, reading information reserved for subscribers.
- the program of the application AP 1 is preferably held and executed by the processor HP 1 if the service is free of charge, or is preferably held and executed by the processor HP 2 if it is chargeable, as it requires an identification of the subscriber.
- an application AP 1 can be processed by the processor HP 1 or the processor HP 2 .
- the NFC component NFCR 1 of the telephone 30 is in “card emulation” mode to be read by standard RD readers in payment or chargeable access control applications (e.g., payment machine, entrance to the subway, or the like).
- the mobile telephone 30 is then used like a chip card.
- the program of the application AP 2 is preferably held and executed by the secure processor HP 2 , as represented in FIG. 1 , as access to the service requires an identification of the subscriber.
- the NFC component NFCR 1 of the telephone 30 is in “device” mode and communicates with another device, for example, a reader integrated into another mobile telephone 31 or a computer 32 .
- This type of application AP 3 is generally free of charge and enables data packets to be transferred from one device to another (particularly point-to-point file transfer).
- the program of the application AP 3 is preferably held and executed by the non-secure processor HP 1 , as shown in FIG. 1 , which has a computing power greater than the secure processor HP 2 , if the latter is a SIM card processor.
- FIG. 3 schematically represents the architecture of the NFC component NFCR 1 .
- the component NFCR 1 comprises an interface circuit CLINT to send/receive contactless data, equipped with an antenna circuit ACT, hard-wire communication interfaces INT 1 , INT 2 connected to the interface circuit CLINT, and a controller NFCC.
- the interface INT 1 is connected to the host processor HP 1
- the interface INT 2 is connected to the host processor HP 2 . All of these components form an NFC chipset.
- the production of an NFC chipset requires establishing communication channels between each of the host processors HP 1 , HP 2 and the NFC component NFCR 1 to enable the host processors HP 1 , HP 2 to send data via the contactless data transmission channel and to route the incoming data streams (data received via the contactless data transmission channel) towards each of the host processors HP 1 , HP 2 .
- one of the host processors HP 1 , HP 2 is secure. It is therefore preferable for the communication channel between the secure host processor and the NFC component NFCR 1 to be secure itself, particularly to avoid the possibility of secret data transmitted via a contactless transmission channel being intercepted or modified, or even emulated by a non-authorized device.
- the establishment of such a secure transmission channel generally requires an authentication of the host processor by the NFC component NFC 1 , and therefore the sharing of common secret data or the respective knowledge of complementary secret data.
- the manufacturer of an NFC chipset is not the same as the manufacturer of secure host processors nor the operator who customizes each secure host processor.
- an NFC chipset may need to be connected to different interchangeable secure processors. Therefore, the NFC controller cannot be customized to store secret data of a specific secure host processor.
- the NFC component NFCR 1 of an NFC chipset may authenticate a secure processor so as to be capable of establishing a secure transmission channel between the NFC component NFCR 1 and the secure processor.
- the controller is connected to an NFC interface circuit sending and receiving contactless data.
- the method includes connecting the host processor to the controller and checking that there is a predefined relation between a first secret data stored by the host processor and a second secret data stored by the controller.
- the method further includes transmitting the second secret data to the controller, and of the controller storing the second secret data.
- the controller authenticates the host processor by checking the relation between the first and second secret data.
- the host processor authenticates the controller by checking the relation between the first and second secret data.
- the method further includes the controller transmitting a session key to the host processor if the authentication of the host processor by the controller was successful.
- the session key is then used to cipher the data exchanged between the host processor and the controller.
- the method includes the host processor sending an authentication request to the controller.
- the controller answers the request by supplying a random number.
- the host processor ciphers the random number received by means of an encryption function using the first secret data it stores as an enciphering key, and transmits the result of the enciphering to the controller.
- the controller checks the result of the enciphering received by way of an encryption function using the second secret data it stores as an enciphering key, The authentication of the host processor is successful if the check was successfully performed.
- the first and second secret data are identical.
- the first secret data is a public enciphering key and the second secret data is a private enciphering key linked to the first secret data by an asymmetric encryption relation.
- the method also includes supplying the host processor, the host processor being removably associated with a contactless component storing the second secret data to be transmitted to the controller, and connecting the host processor to the controller.
- the second secret data is transmitted to the controller by the contactless component.
- the host processor is an integrated circuit of a SIM card removable from a card integrating a contactless component storing the second secret data to be contactlessly transmitted to the controller.
- the NFC system is a mobile telephone including another host processor connected to the controller.
- the second secret data is transmitted to the controller by optically reading an optical code which is translated and transmitted to the controller.
- the second secret data is transmitted to the controller by keyboarding the value of the second secret data that is transmitted to the controller.
- the present disclosure also relates to a system including a controller connected to an interface circuit for sending/receiving contactless data of NFC type, and a connector for connecting the controller to a host processor.
- the controller is configured to check that there is a predefined relation between a first secret data stored by the host processor and a second secret data stored by the controller.
- the controller is configured to receive and store the second secret datum when the system is initialized.
- the controller is configured to authenticate the host processor by checking the relation between the first and second secret data.
- the host processor is configured to authenticate the controller by checking the relation between the first and second secret data.
- the controller is configured to transmit a session key to the host processor if the authentication of the host processor by the controller was successful.
- the session key is used to cipher the data exchanged between the host processor and the controller.
- the host processor is configured to send an authentication request to the controller.
- the controller is configured to answer the request by supplying a random number.
- the host processor is configured to cipher the random number received using an encryption function using the first secret data as an enciphering key, and to transmit the result of the enciphering to the controller.
- the controller is configured to check the result of the enciphering received using an encryption function using the second secret data as an enciphering key. The authentication of the host processor is successful if the check was successfully performed.
- the host processor is removably associated with a contactless component storing the second secret data to be contactlessly transmitted to the controller.
- the host processor is an integrated circuit of a SIM card removable from a smart card integrating a contactless component storing the second secret data to be contactlessly transmitted to the controller
- the NFC system is a mobile telephone comprising another host processor connected to the controller.
- the second secret data is transmitted to the controller by optically reading an optical code which is translated and transmitted to the controller.
- the second secret data is transmitted to the controller by keyboarding the value of the second secret data, which is transmitted to the controller.
- the present disclosure also relates to a smart card including an integrated circuit card removable from the smart card and integrating a secure processor saving a first secret data.
- the smart card also includes a contactless component coupled to an NFC interface circuit sending and receiving contactless data, and saving a second secret data to be contactlessly transmitted.
- the second secret data is linked to the first secret data by a predefined relation.
- the secure processor is configured to authenticate a controller by checking the relation between the first and second secret data.
- the secure processor is configured to receive a session key if it has been authenticated by a controller.
- the session key is used to cipher the data exchanged between the host processor and the controller.
- the secure processor is configured to send an authentication request to the controller, receive a random number, cipher the random number received using an encryption function using the first secret data as an enciphering key, and transmit the result of the enciphering.
- FIG. 1 shows in block form a classic architecture of NFC chipset, and contactless circuits with which the NFC chipset can communicate;
- FIG. 2 shows various applications of an NFC chipset integrated into a mobile telephone
- FIG. 3 shows in block form the classic architecture of an NFC component present in the NFC chipset in FIG. 1 ;
- FIG. 4A to 4C show an NFC chipset capable of receiving an interchangeable secure host processor removed from a card equipped with an NFC component, according to a preferred embodiment
- FIG. 5 shows an authentication sequence executed by an NFC component of the NFC chipset and a secure host processor according to a preferred embodiment
- FIG. 6 shows an example of hardware architecture of an NFC component present in the NFC chipset in FIG. 4A to 4C according to a preferred embodiment
- FIG. 7 shows an example of software architecture of the NFC component in FIG. 6 according to a preferred embodiment.
- FIGS. 4A to 4C schematically show the implementation of an authentication method according to a preferred embodiment.
- the method is implemented in an NFC chipset comprising an NFC component referenced “NFCR 2 ”, a first host processor HP 1 , and connecting means C 1 for connecting the component NFCR 2 to a second host processor HP 2 .
- the component NFCR 2 is substantially similar to the component NFCR 1 described above, particularly with respect to a controller NFCC and an interface circuit CLINT, for sending/receiving contactless data, equipped with an antenna circuit ACT.
- the connecting means C 1 may be, for example, contact pads provided to co-operate with contact pads formed on the host processor HP 2 .
- the host processor HP 2 is coupled to a contactless communication interface circuit to communicate with the controller NFCC.
- the NFC chipset does not yet include a second host processor HP 2 , which is removably integrated into a smart card 1 .
- the smart card 1 into which the host processor HP 2 is integrated comprises a contactless component CLC with units similar to those of the component NFCR 1 described above.
- the component CLC particularly includes a controller NFCC and an interface circuit CLINT, for sending/receiving contactless data, equipped with an antenna circuit ACT 1 , but no hard-wire communication interfaces INT 1 , INT 2 .
- the processor HP 2 is removable from the smart card 1 for insertion into the chipset, where it is connected to the component NFCR 2 by the connecting means C 1 .
- the processor HP 2 and the component CLC have previously been customized and thus each store a secret data K 1 , K 2 .
- the secret data K 1 , K 2 stored respectively by the processor HP 2 and the component NFCR 2 are linked to each other by a relation that it is possible to check.
- This relation may simply be an equality relation or any other relation, such as an encryption function. Therefore, the data K 1 stored by the host processor may be a private key and the data K 2 stored by the component NFCR 2 may be a public key of a pair of asymmetric enciphering keys.
- the host processor HP 1 is, for example, the main processor of the chipset into which the component NFCR 2 is embedded.
- the component NFCR 2 and the processor HP 2 each may be a secure processor, i.e., comprising the classic encryption and authentication circuits of secure processors.
- the processor HP 1 is not secure.
- the chipset may also comprise a third host processor HP 3 .
- the chipset may be a mobile telephone.
- the processor HP 1 is the main processor of the telephone
- the processor HP 2 is a chip of a SIM card
- the processor HP 3 is a bank card chip.
- the processor HP 2 is removed from the card 1 into which the component CLC is integrated, and inserted into the chipset, where it is connected to the component NFCR 2 as shown by FIGS. 4A and 4B .
- the component NFCR 2 is in “reader” mode when the chipset is initialized, and seeks to read an NFC component in passive mode.
- the component NFCR 2 activates the component CLC, which supplies the component NFCR 2 with the secret data K 2 .
- the data K 2 is stored by the component NFCR 2 in a non-volatile memory of the EEPROM type, for example ( FIG. 4C ).
- FIG. 5 shows different steps of such an authentication sequence executed by the secure host processor HP 2 and the controller NFCC of the component NFCR 2 .
- a first step S 1 the processor HP 2 sends an authentication request to the controller NFCC.
- the controller NFCC answers the request by supplying a random number “Rnd Nb” and information “NFC Info.” relating to the NFC component (for example a serial number, a manufacturing date, a software version number, or the like).
- the processor HP 2 uses the secret data K 1 as an enciphering key to cipher the random number received, and possibly any other information received, and transmits the ciphered data to the controller NFCC.
- the controller NFCC deciphers the data received using the secret data K 2 as an enciphering key. If the deciphered data corresponds to the data sent in step S 2 , the secret data K 1 , K 2 are indeed linked by a predefined relation, and the controller NFCC considers the processor HP 2 to be authenticated. If so, the controller NFCC transmits a message to the processor HP 2 notifying it that it has been authenticated and containing a session key SK.
- the session key SK is, for example, a random number.
- the controller NFCC If the deciphering of the ciphered information does not supply the information it transmitted to the processor HP 2 , the controller NFCC considers the processor HP 2 as not authenticated, and refuses any other communication with the processor HP 2 .
- the controller NFCC and the processor HP 2 may exchange information, such as configuration and management information, in a ciphered form using the session key SK as a symmetric enciphering key (steps S 5 and S 6 ).
- information such as configuration and management information
- a routing table stored in the non-volatile memory of the controller NFCC can thus be transferred into the processor HP 2 in order to be used in another NFC chipset (for example, another mobile telephone).
- the information stored in the non-volatile memory of the controller NFCC can also be transferred into the component CLC in order to be used in another NFC chipset.
- the information transmitted in step S 2 can also be ciphered by the controller NFCC using the secret data K 2 , the result of the enciphering being transmitted with the non-ciphered information.
- the processor HP 2 may then decipher the result of the enciphering using the secret data K 1 and check the identity between the information received and the result of the deciphering. In this way, the processor HP 2 can check whether the controller NFCC has the secret data K 2 corresponding to the secret data K 1 , and thus authenticate the controller NFCC. If the host processor HP 2 does not authenticate the controller NFC, it refuses to communicate with the controller NFC.
- the new host processor will not have the session key SK and will not therefore be able to communicate with the controller NFCC, unless the component CLC corresponding to the new host processor is available and unless the execution of the authentication procedure described above with reference to FIG. 5 is launched, by triggering the initialization of the NFC chipset.
- FIG. 6 shows an example of hardware architecture of the component NFCR 2 shown in FIGS. 4A to 4C .
- the component NFCR 2 includes the controller NFCC and the interface CLINT already described, and a memory array comprising a ROM-type (read-only memory) program memory MEM 1 , a RAM-type (random access memory) data memory MEM 2 , and an EEPROM-type electrically erasable and programmable memory MEM 3 enabling the secret data K 2 and the session key SK to be recorded.
- the component NFCR 2 also includes an authentication and error correction circuit AUTHCT having Data Encryption Standard (EFS) and Elliptic Curve Cryptography (ECC) algorithms, or other encryption algorithms.
- ECS Data Encryption Standard
- ECC Elliptic Curve Cryptography
- a connection port INT 1 of UART (Universal Asynchronous Receiving Transmitting) type connects to the host processor HP 1 .
- An ISO7816-type connection port INT 2 connects to the host processor HP 2 (the processor HP 2 here being assumed to be a SIM card).
- An SWP-type (Single Wire Protocol) connection port INT 3 enables the host processor HP 3 to be connected.
- a data bus DTB and an address bus ADB link the memory array, the controller NFCC, the interface CLINT and the ports INT 1 , INT 2 , INT 3 .
- a control bus CTB enables the controller NFCC to read- and/or write-control and access these various elements.
- the interface CLINT and the ports INT 1 , INT 2 , INT 3 each have a parallel-input input buffer BUF 1 and a parallel-output output buffer BUF 2 that is write-accessible and respectively read-accessible via the data bus and the address bus.
- the exchange of data forming the routing commands or the data frames between the host processors HP 1 , HP 2 , HP 3 and the controller NFCC or the interface CLINT is thus performed by data blocks of the size of the buffers BUF 1 , BUF 2 , and is paced by the controller NFCC.
- FIG. 7 represents an example of software architecture of the component NFCR 2 and of the host processors HP 1 , HP 2 .
- This software architecture comprises, for the NFC component NFCR 2 and the host processors HP 1 , HP 2 of the system, several software layers going from the lowest level (data link layer) to the highest level (application layer).
- the representation of these software layers in FIG. 9 is simplified compared to the real software architecture of an NFC system according to one embodiment, but is sufficient for those skilled in the art wishing to implement the embodiment in the manner proposed here.
- Each host processor HP 1 , HP 2 includes at least four software layers, in an ascending order of level.
- a lowest level layer Hardware Management Layer (HWML) manages the operation of the hardware elements enabling the host processors HP 1 , P 2 to exchange data with the controller NFCC. This is, for example, the management layer of the UART interface for the processor HP 1 and the management layer of the ISO7816 interface for the processor HP 2 .
- An Interface Protocol Layer (INTPL) layer manages the protocol of the communication ports INT 1 , INT 2 , INT 3 . This is, for example, the management layer of the UART protocol for the processor HP 1 and the management layer of the ISO7816 protocol for the processor HP 2 .
- An HCIL layer manages the HCI protocol according to one embodiment, i.e., manages the creation of a communication channel.
- the HCIL layer rests on the INTPL and HWML layers that are practically transparent to the HCIL layer.
- a high level Application layer APL manages the RFID applications such as those represented in FIG. 2 (reading a chip card or an electronic tag, emulation of a chip card, dialogue in “device-to-device” mode with an external processor to exchange files, or the like).
- the APL layer may include several application programs, each being secure or not (according to the internal resources of the processor) and each using a type of protocol and an operating mode of the interface CLINT.
- the high level APL layer rests on the HWML, INTPL layers and the HCIL layer, which are practically transparent to the APL layer.
- the controller NFCC includes the following software layers.
- Two HWML 1 and INTPL layers are included and are of the same type as the HWML and INTPL layers present in the host processors HP 1 , HP 2 .
- these layers are represented in the processor NFCC, but in reality are located in the ports INT 1 and INT 2 , which are considered to be part of the controller, as well as the buses ADB, DTB, CTB.
- the processing of the UART and 7816 protocols is performed here in the ports INT 1 , INT 2 , which make their input and output buffers BUF 1 , BUF 2 available to the controller via the buses ADB, DTB, CTB.
- Another low level layer HWML 2 enables the controller to write to the buffers BUF 1 and to read the buffers BUF 2 , via the buses ADB, DTB, CTB, by breaking down the data frames or the commands into data blocks of the same size as the buffers.
- An HCI-ADMIN-L layer or HCI protocol administration layer communicates with the HCIL layers of the host processors HP 1 , HP 2 as routing administrator.
- a CLINTCL (Contactless Interface Control Layer) layer manages the interface CLINT and indicates thereto the mode into which the interface CLINT must put itself and the protocol to be used to send data in a contactless communication channel.
- the CLINTCL layer also controls the interface CLINT in contactless data receipt mode and cyclically asks the interface CLINT to perform a scan of the modes (“reader” mode, “emulation” mode and “device” mode) and to search for incoming data in each mode.
- the interface CLINT thus emits a magnetic field at regular intervals to poll any contactless cards or tags (or other portable objects operating in a contactless manner) that could be present within its polling range.
- the interface CLINT also puts itself at regular intervals into a listening mode (“emulation” mode) to detect whether a reader in active mode is sending polling messages.
- An optional APL layer can itself manage applications, just like the host processors HP 1 , HP 2 . Indeed, although it has not been described until now, applications can also be managed by the NFC component itself.
- the interface CLINT includes the following software layers.
- a HWML low level layer equivalent to the HWML 2 layer of the controller NFCC manages the data buffers BUF 1 , BUF 2 via the buses ADB, DTB, CTB.
- An HCIL layer (as indicated above) makes the interface CLINT compatible with the HCI protocol.
- CLPTL Contactless Protocol Layer
- MCL Mode Control Layer
- an NFC chipset may comprise a single host processor and an NFC component, where execution of applications are controlled.
- the secret data K 2 may be transmitted to the component NFCR 2 in other manners than by a contactless link.
- the secret data K 2 can be transmitted by optically reading an optical code (e.g., a bar code) or by keyboarding the secret data K 2 captured appearing on the card from which the SIM card (host processor HP 2 ) is removed.
- the host processor HP 1 which is connected to the image sensor or to the keyboard and to the controller NFCC, then transmits the secret data K 2 captured to the controller NFC.
- the processor HP 1 also translates the optical code to obtain the secret data K 2 .
Abstract
Description
Claims (26)
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
FR0608764 | 2006-10-05 | ||
FR0608764A FR2906952B1 (en) | 2006-10-05 | 2006-10-05 | METHOD FOR MUTUAL AUTHENTICATION BETWEEN A COMMUNICATION INTERFACE AND A HOST PROCESSOR OF AN NFC CHIPSET |
Publications (2)
Publication Number | Publication Date |
---|---|
US20080085001A1 US20080085001A1 (en) | 2008-04-10 |
US8762720B2 true US8762720B2 (en) | 2014-06-24 |
Family
ID=38049418
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/867,123 Expired - Fee Related US8762720B2 (en) | 2006-10-05 | 2007-10-04 | Method of mutual authentication between a communication interface and a host processor of an NFC chipset |
Country Status (5)
Country | Link |
---|---|
US (1) | US8762720B2 (en) |
EP (1) | EP1909431B1 (en) |
CN (1) | CN101159008B (en) |
CA (1) | CA2604868C (en) |
FR (1) | FR2906952B1 (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20130254442A1 (en) * | 2012-03-22 | 2013-09-26 | Raytheon Company | Data filter |
US10503913B2 (en) | 2015-03-12 | 2019-12-10 | Visa International Service Association | Mutual authentication of software layers |
US10853790B2 (en) | 2015-09-25 | 2020-12-01 | Samsung Electronics Co., Ltd. | Method of operating payment device for selectively enabling payment function according to validity of host |
Families Citing this family (34)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102007000589B9 (en) * | 2007-10-29 | 2010-01-28 | Bundesdruckerei Gmbh | Method for protecting a chip card against unauthorized use, chip card and chip card terminal |
US20090281947A1 (en) * | 2008-05-06 | 2009-11-12 | Comverse Ltd. | Method and system for mobile commerce |
EP3668130B1 (en) * | 2008-07-20 | 2023-12-20 | Samsung Electronics Co., Ltd. | Method and near field communication controller for managing multiple applications in near field communication |
FR2935572B1 (en) * | 2008-08-28 | 2013-01-11 | Eric Andre Fouchard | SECURE METHODS OF TRANSMITTING AND RECEIVING DATA BETWEEN TERMINALS COMPRISING NEAR FIELD COMMUNICATION MEANS, AND CORRESPONDING TERMINALS |
SG173004A1 (en) * | 2008-12-12 | 2011-08-29 | Nxp Bv | Portable mobile communication device and method of controlling near field communication |
EP2202676A1 (en) * | 2008-12-23 | 2010-06-30 | Gemalto SA | Securing device with radiofrequency communication interface |
FR2943443A1 (en) * | 2009-03-20 | 2010-09-24 | Inside Contactless | METHOD FOR ESTABLISHING A DATA LINK BETWEEN TWO PROCESSORS, IN PARTICULAR IN AN NFC CHIPSET |
CN102163995A (en) * | 2010-02-23 | 2011-08-24 | 中兴通讯股份有限公司 | Near field communication realization method for mobile equipment and mobile equipment realizing near field communication |
US8342415B2 (en) * | 2010-03-17 | 2013-01-01 | Inside Secure | Method of conducting a transaction using an NFC device |
FR2957437B1 (en) | 2010-03-09 | 2012-03-30 | Proton World Int Nv | PROTECTION AGAINST A DEROUTEMENT OF A COMMUNICATION CHANNEL OF AN NFC CIRCUIT |
FR2957438B1 (en) | 2010-03-09 | 2012-03-30 | Proton World Int Nv | DETECTION OF A DEROUTEMENT OF A COMMUNICATION CHANNEL OF A TELECOMMUNICATION DEVICE COUPLED TO AN NFC CIRCUIT |
FR2957440B1 (en) | 2010-03-09 | 2012-08-17 | Proton World Int Nv | PROTECTION OF A SECURITY MODULE IN A TELECOMMUNICATION DEVICE COUPLED TO AN NFC CIRCUIT |
FR2957439B1 (en) | 2010-03-09 | 2012-03-30 | Proton World Int Nv | PROTECTION OF A COMMUNICATION CHANNEL BETWEEN A SECURITY MODULE AND AN NFC CIRCUIT |
FR2962571B1 (en) * | 2010-07-08 | 2012-08-17 | Inside Contactless | METHOD FOR PERFORMING A SECURE APPLICATION IN AN NFC DEVICE |
FR2964285B1 (en) | 2010-08-31 | 2012-09-07 | Proton World Int Nv | PROTECTING A COMMUNICATION CHANNEL OF A TELECOMMUNICATION DEVICE COUPLED TO AN NFC CIRCUIT AGAINST A BEHAVIOR |
FR2964276B1 (en) | 2010-08-31 | 2012-09-07 | Proton World Int Nv | SECURING A TELECOMMUNICATION DEVICE EQUIPPED WITH A NEAR FIELD COMMUNICATION MODULE |
JP5633336B2 (en) | 2010-11-29 | 2014-12-03 | ソニー株式会社 | COMMUNICATION DEVICE AND COMMUNICATION METHOD, COMMUNICATION CONTROL DEVICE, COMMUNICATION CONTROL METHOD, AND PROGRAM |
WO2012080181A2 (en) | 2010-12-15 | 2012-06-21 | Stmicroelectronics (Rousset) Sas | Method and device for managing information exchange between a main element, for example a nfc controller, and a set of at least two auxiliary elements |
FR2969341B1 (en) * | 2010-12-20 | 2013-01-18 | Proton World Int Nv | MANAGING COMMUNICATION CHANNELS IN A TELECOMMUNICATION DEVICE COUPLED TO AN NFC CIRCUIT |
AU2011200445B8 (en) * | 2011-02-03 | 2013-03-07 | Idondemand Pty Ltd | Method and apparatus for dynamic authentication |
FR2973901B1 (en) | 2011-04-05 | 2013-04-19 | Proton World Int Nv | TESTING THE RESISTANCE OF A SECURITY MODULE OF A TELECOMMUNICATION DEVICE COUPLED TO AN NFC CIRCUIT AGAINST COMMUNICATION CHANNEL MISMATCH ATTACKS |
FR2974208B1 (en) | 2011-04-13 | 2013-08-16 | Proton World Int Nv | ACCESS CONTROL MECHANISM FOR A SECURE ELEMENT COUPLED TO AN NFC CIRCUIT. |
CN102307056B (en) * | 2011-08-18 | 2015-04-22 | 惠州Tcl移动通信有限公司 | Method for processing mobile terminal contact information and mobile terminal |
US9370040B2 (en) * | 2011-12-27 | 2016-06-14 | Qualcomm Incorporated | Methods and apparatus for improving NFC LLCP partitioning |
US9231660B1 (en) | 2012-02-17 | 2016-01-05 | Google Inc. | User authentication using near field communication |
US8478195B1 (en) | 2012-02-17 | 2013-07-02 | Google Inc. | Two-factor user authentication using near field communication |
CN104851159B (en) * | 2014-12-01 | 2017-06-06 | 讯美电子科技有限公司 | A kind of network-type access control system |
EP3094122B1 (en) * | 2015-05-13 | 2018-12-26 | Assa Abloy Ab | Systems and methods for protecting sensitive information stored on a mobile device |
CN106600799A (en) * | 2017-02-06 | 2017-04-26 | 苏州欧特威电子科技有限公司 | Passive intelligent lock based on wireless charging and cipher mutual authentication |
CN108234132B (en) * | 2017-12-07 | 2021-11-26 | 深圳市中易通安全芯科技有限公司 | Secure communication system and method for main control chip and encryption chip |
US10581611B1 (en) * | 2018-10-02 | 2020-03-03 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
CN110764772B (en) * | 2019-09-02 | 2023-04-25 | 广东天波信息技术股份有限公司 | Method and device for being compatible with multiple NFCCs |
CN111667613B (en) * | 2020-05-14 | 2021-11-16 | 北京时代艾特智能科技有限公司 | Wireless intelligent lock safety management method |
CN116704689A (en) * | 2023-07-24 | 2023-09-05 | 成都西谷曙光数字技术有限公司 | Passive anti-theft electronic tag system |
Citations (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE19826428A1 (en) * | 1998-06-16 | 1999-12-23 | Freudenberg Carl Fa | Miniaturized chip module with holding body, esp. chip with standard chip card design |
DE19922063A1 (en) * | 1999-05-14 | 2000-11-23 | Bosch Gmbh Robert | Adaptor card for adapting chip card to predetermined standard, has identification devices for determining identity of chip inserted into adaptor card |
DE19926348A1 (en) * | 1999-06-09 | 2000-12-14 | Orga Kartensysteme Gmbh | Manufacturing method for mini chip cards involves forming at least two mini chip cards in standard bearer card with preferred break line in region close to central plane of card |
WO2002045441A1 (en) | 2000-11-28 | 2002-06-06 | Rcd Technology, Inc. | Replacing stored code with user inputting code on the rf id card |
US6484935B1 (en) * | 1998-12-17 | 2002-11-26 | Giesecke & Devrient Gmbh | Method and apparatus for producing personalized chip cards |
US6510517B1 (en) * | 1996-09-13 | 2003-01-21 | Temic Semiconductor Gmbh | Method of cryptological authentification in a scanning identification system |
US6554193B1 (en) * | 1998-08-31 | 2003-04-29 | The Standard Register Company | Smart card with replaceable chip |
US20040066278A1 (en) | 2002-10-04 | 2004-04-08 | Hughes Michael A. | Challenged-based tag authentication medel |
WO2004036513A1 (en) | 2002-10-17 | 2004-04-29 | Vodafone Group Plc | Facilitating and authenticating transactions |
US6899276B2 (en) * | 2002-02-15 | 2005-05-31 | Axalto Sa | Wrapped-card assembly and method of manufacturing the same |
US20050231921A1 (en) * | 2002-05-24 | 2005-10-20 | Chie Noda | Chip card of reduced size with backward compatibility and adapter for a reduced size chip card |
WO2006027723A1 (en) * | 2004-09-06 | 2006-03-16 | Koninklijke Philips Electronics N.V. | Portable storage device and method for exchanging data |
US7024226B2 (en) * | 2001-01-24 | 2006-04-04 | Telenor Asa | Method for enabling PKI functions in a smart card |
US20060208066A1 (en) * | 2003-11-17 | 2006-09-21 | Dpd Patent Trust | RFID token with multiple interface controller |
WO2006100171A1 (en) | 2005-03-24 | 2006-09-28 | International Business Machines Corporation | Secure credit card with near field communications (nfc) |
US20060251256A1 (en) * | 2005-04-04 | 2006-11-09 | Nokia Corporation | Administration of wireless local area networks |
US20060287004A1 (en) * | 2005-06-17 | 2006-12-21 | Fuqua Walter B | SIM card cash transactions |
US20070011728A1 (en) * | 2005-07-06 | 2007-01-11 | White Charles A | Method for Authenticating and Securing Transactions Using RF Communication |
US20070055633A1 (en) * | 2005-09-08 | 2007-03-08 | Sung-Rock Cheon | Secure NFC apparatus and method supporting various security modules in plug-in fashion |
US20070194945A1 (en) * | 2004-12-07 | 2007-08-23 | Paul Atkinson | Mobile Device for Selectively Activating a Target and Method of Using Same |
US20080024268A1 (en) * | 2006-07-14 | 2008-01-31 | Wong Hong W | Component authentication for computer systems |
US20080104394A1 (en) * | 2006-09-29 | 2008-05-01 | Roy Want | Code-based communication connection management |
US7590409B2 (en) * | 2005-02-25 | 2009-09-15 | Sony Corporation | Communications system, communications apparatus, and communication method |
US7606560B2 (en) * | 2002-08-08 | 2009-10-20 | Fujitsu Limited | Authentication services using mobile device |
US7818572B2 (en) * | 2003-12-09 | 2010-10-19 | Dominic Kotab | Security system and method |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2396707B (en) * | 2002-10-17 | 2004-11-24 | Vodafone Plc | Facilitating and authenticating transactions |
-
2006
- 2006-10-05 FR FR0608764A patent/FR2906952B1/en active Active
-
2007
- 2007-09-17 EP EP07018172.2A patent/EP1909431B1/en not_active Expired - Fee Related
- 2007-09-29 CN CN200710164121XA patent/CN101159008B/en not_active Expired - Fee Related
- 2007-10-02 CA CA2604868A patent/CA2604868C/en not_active Expired - Fee Related
- 2007-10-04 US US11/867,123 patent/US8762720B2/en not_active Expired - Fee Related
Patent Citations (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6510517B1 (en) * | 1996-09-13 | 2003-01-21 | Temic Semiconductor Gmbh | Method of cryptological authentification in a scanning identification system |
DE19826428A1 (en) * | 1998-06-16 | 1999-12-23 | Freudenberg Carl Fa | Miniaturized chip module with holding body, esp. chip with standard chip card design |
US6554193B1 (en) * | 1998-08-31 | 2003-04-29 | The Standard Register Company | Smart card with replaceable chip |
US6484935B1 (en) * | 1998-12-17 | 2002-11-26 | Giesecke & Devrient Gmbh | Method and apparatus for producing personalized chip cards |
DE19922063A1 (en) * | 1999-05-14 | 2000-11-23 | Bosch Gmbh Robert | Adaptor card for adapting chip card to predetermined standard, has identification devices for determining identity of chip inserted into adaptor card |
DE19926348A1 (en) * | 1999-06-09 | 2000-12-14 | Orga Kartensysteme Gmbh | Manufacturing method for mini chip cards involves forming at least two mini chip cards in standard bearer card with preferred break line in region close to central plane of card |
WO2002045441A1 (en) | 2000-11-28 | 2002-06-06 | Rcd Technology, Inc. | Replacing stored code with user inputting code on the rf id card |
US7024226B2 (en) * | 2001-01-24 | 2006-04-04 | Telenor Asa | Method for enabling PKI functions in a smart card |
US6899276B2 (en) * | 2002-02-15 | 2005-05-31 | Axalto Sa | Wrapped-card assembly and method of manufacturing the same |
US20050231921A1 (en) * | 2002-05-24 | 2005-10-20 | Chie Noda | Chip card of reduced size with backward compatibility and adapter for a reduced size chip card |
US7606560B2 (en) * | 2002-08-08 | 2009-10-20 | Fujitsu Limited | Authentication services using mobile device |
US20040066278A1 (en) | 2002-10-04 | 2004-04-08 | Hughes Michael A. | Challenged-based tag authentication medel |
WO2004036513A1 (en) | 2002-10-17 | 2004-04-29 | Vodafone Group Plc | Facilitating and authenticating transactions |
US20060208066A1 (en) * | 2003-11-17 | 2006-09-21 | Dpd Patent Trust | RFID token with multiple interface controller |
US7818572B2 (en) * | 2003-12-09 | 2010-10-19 | Dominic Kotab | Security system and method |
WO2006027723A1 (en) * | 2004-09-06 | 2006-03-16 | Koninklijke Philips Electronics N.V. | Portable storage device and method for exchanging data |
US20070194945A1 (en) * | 2004-12-07 | 2007-08-23 | Paul Atkinson | Mobile Device for Selectively Activating a Target and Method of Using Same |
US7590409B2 (en) * | 2005-02-25 | 2009-09-15 | Sony Corporation | Communications system, communications apparatus, and communication method |
WO2006100171A1 (en) | 2005-03-24 | 2006-09-28 | International Business Machines Corporation | Secure credit card with near field communications (nfc) |
US20060251256A1 (en) * | 2005-04-04 | 2006-11-09 | Nokia Corporation | Administration of wireless local area networks |
US20060287004A1 (en) * | 2005-06-17 | 2006-12-21 | Fuqua Walter B | SIM card cash transactions |
US20070011728A1 (en) * | 2005-07-06 | 2007-01-11 | White Charles A | Method for Authenticating and Securing Transactions Using RF Communication |
US20070055633A1 (en) * | 2005-09-08 | 2007-03-08 | Sung-Rock Cheon | Secure NFC apparatus and method supporting various security modules in plug-in fashion |
US20080024268A1 (en) * | 2006-07-14 | 2008-01-31 | Wong Hong W | Component authentication for computer systems |
US20080104394A1 (en) * | 2006-09-29 | 2008-05-01 | Roy Want | Code-based communication connection management |
Non-Patent Citations (2)
Title |
---|
Juan Carlos Lopez Calvet, "The role of RFID in the mobile phone", Telektronikk, No. 3, pp. 131-142, (2005). |
Menezes et al. "Handbook of Applied Cryptography" © 1997 CRC Press LLC. Excerpt from Chapter 10 (pp. 385-424). * |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20130254442A1 (en) * | 2012-03-22 | 2013-09-26 | Raytheon Company | Data filter |
US8984205B2 (en) * | 2012-03-22 | 2015-03-17 | Raytheon Company | Data filter |
US10503913B2 (en) | 2015-03-12 | 2019-12-10 | Visa International Service Association | Mutual authentication of software layers |
US11068608B2 (en) | 2015-03-12 | 2021-07-20 | Visa International Service Association | Mutual authentication of software layers |
US10853790B2 (en) | 2015-09-25 | 2020-12-01 | Samsung Electronics Co., Ltd. | Method of operating payment device for selectively enabling payment function according to validity of host |
US20210042731A1 (en) * | 2015-09-25 | 2021-02-11 | Samsung Electronics Co., Ltd. | Method of operating payment device for selectively enabling payment function according to validity of host |
US11763289B2 (en) * | 2015-09-25 | 2023-09-19 | Samsung Electronics Co., Ltd. | Method of operating payment device for selectively enabling payment function according to validity of host |
Also Published As
Publication number | Publication date |
---|---|
CA2604868A1 (en) | 2008-04-05 |
US20080085001A1 (en) | 2008-04-10 |
FR2906952A1 (en) | 2008-04-11 |
FR2906952B1 (en) | 2009-02-27 |
EP1909431B1 (en) | 2017-03-22 |
CN101159008B (en) | 2013-06-05 |
CN101159008A (en) | 2008-04-09 |
EP1909431A1 (en) | 2008-04-09 |
CA2604868C (en) | 2016-01-12 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8762720B2 (en) | Method of mutual authentication between a communication interface and a host processor of an NFC chipset | |
US8861733B2 (en) | Method of personalizing a NFC chipset | |
US8532295B2 (en) | Method for the secure loading in a NFC chipset of data allowing access to a service | |
CN102404025B (en) | A kind of terminal and the method processing payment transaction | |
US20090206984A1 (en) | Application control method in an nfc chipset comprising several host processors | |
CN101339597B (en) | Method, system and equipment for upgrading read-write machine firmware | |
CN104899532B (en) | ID card information acquisition methods, apparatus and system | |
KR102009863B1 (en) | System for entrance security and method using the same | |
US10511946B2 (en) | Dynamic secure messaging | |
CN111404706A (en) | Application downloading method, secure element, client device and service management device | |
JP2021175184A (en) | Contactless card with multiple rotating security keys | |
CN105490708A (en) | Method and device for reading and writing smart card | |
CN101330685B (en) | Method for ciphering and transmitting short message | |
KR102172855B1 (en) | Method for Providing Server Type One Time Code for Medium Separation by using User’s Handheld type Medium | |
KR102193696B1 (en) | Method for Providing Safety Login based on One Time Code by using User’s Card | |
JP2017046274A (en) | Information processing system and encrypted communication method | |
KR102076313B1 (en) | Method for Processing Electronic Signature based on Universal Subscriber Identity Module of Mobile Device | |
KR101505735B1 (en) | Method for Authenticating Near Field Communication Card by using Time Verification | |
KR102149313B1 (en) | Method for Processing Electronic Signature based on Universal Subscriber Identity Module | |
JP6801448B2 (en) | Electronic information storage media, authentication systems, authentication methods, and authentication application programs | |
KR101777041B1 (en) | Method for Generating One Time Password based on Asynchronous Local Area Radio Communication | |
KR101513434B1 (en) | Method and Module for Protecting Key Input | |
KR101704249B1 (en) | Method for Controlling Integrated Circuit Chip by using Distributed Processing | |
KR102149315B1 (en) | Method for Processing Electronic Signature based on Universal Subscriber Identity Module at a Financial Institution | |
JP2023533268A (en) | Secure end-to-end pairing of secure elements and mobile devices |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: INSIDE CONTACTLESS, FRANCE Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:CHARRAT, BRUNO;MARTINEAU, PHILIPPE;REEL/FRAME:020084/0291 Effective date: 20071018 |
|
AS | Assignment |
Owner name: INSIDE SECURE, FRANCE Free format text: CHANGE OF NAME;ASSIGNOR:INSIDE CONTACTLESS;REEL/FRAME:028901/0685 Effective date: 20101231 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551) Year of fee payment: 4 |
|
AS | Assignment |
Owner name: VERIMATRIX, FRANCE Free format text: CHANGE OF NAME;ASSIGNOR:INSIDE SECURE;REEL/FRAME:050647/0428 Effective date: 20190624 |
|
AS | Assignment |
Owner name: VERIMATRIX, FRANCE Free format text: CHANGE OF ADDRESS;ASSIGNOR:VERIMATRIX;REEL/FRAME:050733/0003 Effective date: 20190930 |
|
FEPP | Fee payment procedure |
Free format text: MAINTENANCE FEE REMINDER MAILED (ORIGINAL EVENT CODE: REM.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
LAPS | Lapse for failure to pay maintenance fees |
Free format text: PATENT EXPIRED FOR FAILURE TO PAY MAINTENANCE FEES (ORIGINAL EVENT CODE: EXP.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
STCH | Information on status: patent discontinuation |
Free format text: PATENT EXPIRED DUE TO NONPAYMENT OF MAINTENANCE FEES UNDER 37 CFR 1.362 |
|
FP | Lapsed due to failure to pay maintenance fee |
Effective date: 20220624 |